{"id":13389,"date":"2026-06-05T05:03:33","date_gmt":"2026-06-05T05:03:33","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/06\/05\/hacking-metas-ai-chatbot-html\/"},"modified":"2026-06-05T05:03:33","modified_gmt":"2026-06-05T05:03:33","slug":"hacking-metas-ai-chatbot-html","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/06\/05\/hacking-metas-ai-chatbot-html\/","title":{"rendered":"Hacking Meta\u2019s AI Chatbot"},"content":{"rendered":"\n
Hacking Meta\u2019s AI Chatbot<\/div>\n

\t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

Hackers are convincing<\/a> Meta\u2019s AI support chatbot to let them take over other peoples\u2019 accounts:<\/p>\n

\n

A video<\/a> posted on X showed the step-by-step process to hack someone\u2019s Instagram account. The hacker allegedly used a VPN to spoof the targets\u2019 presumed location to avoid triggering Instagram\u2019s automated account protections. Then, the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target\u2019s account. The chatbot can be seen sending a verification code to the email address provided by the hacker; the hacker then shares the verification code with the chatbot, which prompts the chatbot to show a button to \u201cReset Password.\u201d The hacker enters a new password and takes over the victim\u2019s account.<\/p>\n

[\u2026]<\/p>\n

On Monday, Instagram spokesperson Andy Stone said in a reply<\/a> to Wong\u2019s post and others that the issue was now fixed. It\u2019s unclear how many Instagram users had their accounts improperly accessed. <\/p>\n<\/blockquote>\n

It\u2019s not that easy. Probably this particular tactic is now blocked. But there are others, many others, and they cannot be blocked as a class. The real problem is that LLM chatbots are not trustworthy enough for this application.<\/p>\n

Another news article<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Bruce Schneier
\n \t

\n
<\/BR>
\nGo to bruce schneier<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Hacking Meta\u2019s AI Chatbot Hackers are convincing Meta\u2019s AI support chatbot to let them take over other peoples\u2019 accounts: A video posted on X showed the step-by-step process to hack someone\u2019s Instagram account. The hacker allegedly used a VPN to spoof the targets\u2019 presumed location to avoid triggering Instagram\u2019s automated account protections. Then, the hacker […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,57,2250,464,97,268,1210,1],"tags":[87],"class_list":["post-13389","post","type-post","status-publish","format-standard","hentry","category-ai","category-bruce-schneier","category-chatbots","category-cybersecurity","category-hacking","category-llm","category-meta","category-uncategorized","tag-bruce-schneier"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13389"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=13389"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13389\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=13389"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=13389"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=13389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}